Lucene search
HistoryJun 26, 2024 - 6:15 a.m.
CVE-2024-5199
spotify play button
wordpress plugin
stored cross-site scripting
0.0004 Low
EPSS
Percentile
9.1%
The Spotify Play Button WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Related
cvelist
cvelist
CVE-2024-5199 Spotify Play Button <= 1.0 - Contributor+ Stored XSS
2024-06-26 06:00:04
wpexploit
wpexploit
Spotify Play Button <= 1.0 - Contributor+ Stored XSS
2024-06-05 00:00:00
wpvulndb
wpvulndb
Spotify Play Button <= 1.0 - Contributor+ Stored XSS
2024-06-05 00:00:00
cve
cve
CVE-2024-5199
2024-06-26 06:15:16
vulnrichment
vulnrichment
CVE-2024-5199 Spotify Play Button <= 1.0 - Contributor+ Stored XSS
2024-06-26 06:00:04